Privacy Policy

Effective Date: October 1, 2026 Last Updated: September 27, 2026

1. Introduction

Indelible Holdings Inc. (“Indelible,” “Indelible.world,” “we,” “us,” or “our”) builds tools that let anyone establish and verify blockchain-based provenance for digital content. This Privacy Policy explains how we collect, use, and share information in connection with:

(collectively, the “Services”).

This Privacy Policy does not cover our Publisher API or other tools we offer to news organizations and publishers on a business-to-business basis. Those are governed by separate agreements.

By using the Services, you agree to the practices described in this Privacy Policy. If you don’t agree, please don’t use the Services.

This document is provided to help you understand our practices in plain language. It is not a substitute for legal advice, and we’d encourage you to have qualified counsel review it before publishing.


2. The Short Version

Indelible’s core function, certifying and verifying the authorship of content, is designed to work by reading content locally, on your own device, and by querying the public blockchain directly. We don’t operate user accounts or logins in the Services. We don’t currently run analytics tools or advertising technology. We don’t sell personal information. The only data we do handle are: (1) information you send us directly, such as a contact-form message, and (2) technical data that is a byproduct of how blockchains and web infrastructure work. Section 3 breaks this down in detail, and Section 6 explains something important and unusual: content you certify becomes part of a public, permanent blockchain record that neither you nor we can later delete.


3. Information We Collect

a. Information You Provide to Us Directly

If you contact us, for example, through the contact form on indelible.world or by emailing us, we receive whatever you include, typically your name, email address, and message. We use this only to respond to you and don’t add it to any mailing list without your separate consent.

b. Information Processed Locally on Your Device

The App and Extension read the text of a webpage or article you’re viewing (or that you paste in) in order to compute a cryptographic fingerprint of it and compare that fingerprint against records on the blockchain. This processing happens locally in your browser. We do not receive, log, transmit, or store the content of pages you view or verify.

The App and Extension also use your browser’s local storage (not tracking cookies) to remember things like your display preferences and which wallet you have connected, so you don’t have to reconnect on every visit. This data stays on your device. We never receive it, and you can clear it at any time through your browser’s settings.

c. Blockchain and Wallet Information

To certify content, you connect your own third-party, self-custodied crypto wallet (e.g., MetaMask) and sign a transaction yourself. Your wallet address and the resulting transaction are recorded on the public blockchain — not on Indelible’s own servers. We do not maintain a database of user wallet addresses or link wallet addresses to any other information you give us, such as a contact-form email.

d. Information Sent to Alchemy, Our Blockchain Infrastructure Provider

The App and Extension query the blockchain using Alchemy (Alchemy Insights, Inc.), a third-party blockchain infrastructure (“RPC”) provider, in order to read on-chain attestation data. These requests are made directly from your browser, which means Alchemy receives your IP address and the content of the query (e.g., which attestation or contract you’re looking up) as a technical necessity of relaying your request to the blockchain. This is the only third-party service we route Services traffic through today. We encourage you to learn more about Alchemy’s handling of this information by reading their privacy policy, currently at https://www.alchemy.com/policies/privacy-policy.

e. Basic Technical / Hosting Information

Like nearly every website, the infrastructure we use to host the Site, App, and Extension downloads may automatically log basic technical details for security and operational purposes — for example, IP address, browser type, and request timestamps. We do not currently operate any analytics tooling ourselves (e.g., Google Analytics), and we do not use this information for tracking, profiling, or advertising. It exists only at the infrastructure layer as a standard part of operating a web server.


4. How We Use Information

We use the limited information described above to:

We do not use personal information for advertising purposes today, and we do not sell personal information.


5. How We Share Information

We do not sell personal information. We may share information only:


6. Blockchain Data Is Public and Permanent

This is the section that matters most, because it’s different from how most software handles your data.

When you use the App or Extension to certify content, you are broadcasting a transaction to a public, decentralized blockchain, using your own wallet, with your own signature. Once that transaction is confirmed:

Even though the hash we certify contains no information about your original content, please don’t certify content that contains information you wouldn’t want permanently and publicly linked to your wallet address.


7. Cookies and Local Storage

We do not use cookies for advertising or cross-site tracking. As described in Section 3(b), the App and Extension use your browser’s local storage to remember preferences and wallet-connection state. This stays on your device; it is not a tracking mechanism and is not transmitted to us.


8. Data Retention

We keep contact-form and email correspondence only as long as reasonably necessary to address your inquiry and for our internal recordkeeping, and delete it when it’s no longer needed. Basic technical/hosting logs described in Section 3(e) are retained only as long as our infrastructure providers’ standard operational retention periods.

We have no ability to retain, modify, or delete blockchain data; see Section 6.


9. Your Privacy Rights

If you’re in the EU, UK, or Switzerland

Where GDPR or the UK GDPR applies to information we control, you may have the right to request access, correction, or deletion of your personal information, to restrict or object to certain processing, and to receive a copy of your data. You can exercise these rights by emailing privacy@indelible.world. You also have the right to lodge a complaint with your local data protection authority. As explained in Section 6, we’re not able to honor deletion requests for information already confirmed on a public blockchain, since we have no control over it.

If you’re a California resident

Under the CCPA/CPRA, you have the right to know what personal information we’ve collected, to request deletion or correction of it, and to opt out of the “sale” or “sharing” of personal information. We do not sell or share personal information, as those terms are defined under California law. You can exercise these rights by emailing privacy@indelible.world.

Everyone else

Regardless of where you’re located, you’re welcome to email privacy@indelible.world to ask what information, if any, we hold about you, and we’ll do our best to respond promptly.


10. Children’s Privacy

The Services are not directed to children, and we do not knowingly collect personal information from children under 13 (or the relevant minimum age in your jurisdiction). If you believe a child has provided us with personal information, please contact us so we can address it.


11. International Users

Indelible Holdings Inc. is incorporated in Delaware, USA. Our infrastructure providers may process information in the United States and other countries, which may have different data protection laws than your home jurisdiction. By using the Services, you understand your information may be processed outside your home country.


12. Changes to Our Data Practices

We do not currently use analytics tools or advertising technology in the Services. If that changes, for example, if we introduce product analytics or advertising in the future, we will update this Privacy Policy before or at the time such practices begin, describe what’s collected and why, and, where required by law, provide appropriate notice and choices, such as consent or opt-out mechanisms.


13. Security

We take reasonable technical and organizational measures to protect the limited information we hold. That said, no method of transmission or storage is 100% secure, and we can’t guarantee absolute security. You are solely responsible for the security of your own crypto wallet and private keys. We never ask for, and never have access to, your private keys or seed phrase.


14. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we’ll update the “Last Updated” date above and, where appropriate, provide additional notice (such as a notice on the Site).


15. Contact Us

Indelible Holdings Inc. Email: privacy@indelible.world